View a markdown version of this page

Step 1: Create an Amazon Config connector (optional) - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Step 1: Create an Amazon Config connector (optional)

The Amazon Config connector sets up the credential exchange between Amazon and Azure and enables Amazon Config to record Azure resource state. If you want Amazon Config to record the connector's Azure resources, create the Amazon Config connector before you create the Systems Manager Cloud Connector. Otherwise, skip this step. For more information, see Amazon Config recording for Cloud Connectors.

Note

The Amazon Config connector automatically creates a service-linked role for federation. You do not need to create a separate IAM role for this step.

To create an Amazon Config connector for Azure

  1. Create the Amazon Config connector. Replace TENANT_ID with your Azure tenant ID and CLIENT_ID with the Config Application (Client) ID — the application (client) ID of the Amazon Config Azure AD app that you noted in the Azure prerequisites (Step 6).

    aws configservice put-connector \
    --connector-configuration '{
        "azure": {
            "tenantIdentifier": "TENANT_ID",
            "clientIdentifier": "CLIENT_ID"
        }
    }'

    Note the Arn from the response — you need it in the next step.

  2. Confirm the connector was created:

    aws configservice list-connectors